Approving Kernel Extensions for macOS

Overview

Certain applications for macOS install kernel extensions (KEXTs) in order to function properly. Usually in these cases you are prompted to approve the extension within System Preferences -> Security & Privacy -> General; however, in some cases the recently installed extension is not listed for approval, and other methods are required in order to get the software approved.

In this article:

• Normal: Approving Extensions via System Preferences
• Advanced: Approving Extensions via Terminal
  • Vendor IDs

What materials do I need?

• A computer running macOS High Sierra (10.13), or later.

How do I use this technology?

Normal: Approving Extensions via System Preferences

1. Open System Preferences.
   
   
    
2. Click Security & Privacy.
   
   
    
3. Click the General tab.
   • If the Preference pane is locked, then click the lock icon in the lower-left corner.
     
     
      
   • Enter an administrator password, then click Unlock.
     
     
      
4. Click Allow next to the developer's kernel extension that requires approval.
   
   

Advanced: Approving Extensions via Terminal

If you do not see a kernel extension listed for approval within Security & Privacy settings, you can first try uninstalling the application, and then reinstalling the application. However, if the Allow button is not appearing, you can also approve kexts in recovery mode.

1. Startup the Mac in recovery mode.
   • Turn on your Mac, and immediately press and hold Command (⌘)-R.
   • Release the keys when you see an Apple log, spinning globe, or other startup screen.
   • If you're prompted to enter a firmware password please contact the IT Services Technical Support Center for further assistance.
   • If you're prompted to enter a password of a user who is an administrator on the Mac, enter the requested password to continue.
   • Startup is complete when you see the macOS Utilities window:
     
     
      
2. Click the Utilities menu, and select Terminal.
   
   
    
3. Enter the following command, replacing <VendorID> with the appropriate item from the Vendor ID list below:
   
   /usr/sbin/spctl kext-consent add <VendorID>
   
   Press enter.
   
   
    
4. Quit the Terminal application.
5. Click the Apple menu, and select Restart.
   
   

Vendor IDs

Below is a list of Vendor IDs for applications commonly in use within the University of Alaska system.

• Cisco: DE8Y96K9QP

Need additional help or have issues

For additional assistance contact the IT Services Technical Support Center via phone at (907) 786-4646, toll-free at (877) 633-3888, email us at uaa.techsupport@alaska.edu.